[windup-dev] Escaping in templates - <#escape x as x?html>

[Ondrej Zizka]

Some of the values contain HTML, like, for instance, the titles.

We are inconsistent in certain places what should the value be.

I suggest that we add that to the javadoc where appropriate, add the 
<#escape ...>, and add <#noescape> where needed. That's IMO better than 
adding ?html everywhere.

Ondra


On 16.9.2015 06:44, Ing. Ondřej Žižka wrote:
> I think we should add <#escape x as x?html> to all templates - unless
> there's a reason not to. Is there?
>
> This directive makes all ${...}'s HTML-escaped.
>
> Regards,
> Ondra
> _______________________________________________
> windup-dev mailing list
> windup-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/windup-dev